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Top Stories 

• Two New York men pleaded guilty April 1 to their roles in an international cybercrime and 
bank fraud ring that hacked into several financial services institutions and attempted to 
steal around $15 million. - Reuters (See item 7 ) 

• Eleven people were admitted to a hospital April 3 after a chemical was accidentally 
offloaded into the wrong tank at the Roanoke River Service Authority Water Treatment 
Works in Mecklenburg, Virginia. - WTVR 6 Richmond (See item 12 ) 

• The operators of the Bullitt County sewage facility in Kentucky worked to install a 
temporary filtration system after a weld broke around a steel pipe, causing a wall to 
collapse and 400,000 gallons of raw sewage to spill per day since March 29. - Associated 
Press (See item 14 ) 

• Three U.S. Army service members were killed and 16 others were injured April 2 when a 
war veteran opened fire at the Fort Hood military base in Texas before the shooter shot 
himself when confronted. - Associated Press (See item 16 ) 
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Energy Sector 



1. April 2, Carlsbad Current-Argus - (New Mexico) 4 injured in oil well explosion near 
Loco Hills. Four Mesa Well Servicing workers were injured in an oil well explosion 
near Loco Hills while conducting routine maintenance April 2 after a failed seal on an 
Apache Corporation-owned well created a pressure buildup of air and crude oil within 
the well, resulting in a blowout. The oil well was closed while authorities investigated 
the incident. 

Source: http://www.currentargus.com/ci 2547572 1/4-injured-oil- well-explosion-near- 
loco-hills 



For another story, see item 19 
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Chemical Industry Sector 

2. April 3, Wheeling Intelligencer/News-Register - (West Virginia) Truck spills 
hazardous material. Crews responded April 2 after a semi-truck transporting 16 
drums of poisonous alpha-naphthylamine and a non-hazardous foamer spilled onto the 
roadway in Marshall County, West Virginia. The driver was cited for not being 
endorsed to transport hazardous materials. 

Source: http://www.news-register.net/page/content.detail/id/598071/Truck-Spills- 
Hazardous-Material.html 



For another story, see item 12 
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Nuclear Reactors, Materials, and Waste Sector 

3. April 3, Cleveland Plaint Dealer - (Ohio) Perry nuclear declares unusual event, 
radiation not involved. An unusual event was declared at the Perry nuclear power 
plant in Ohio after an undetermined amount of a refrigerant escaped from an air handler 
March 2. The building containing the malfunctioning air handler was closed off and an 
air quality team was dispatched. 

Source: 

http://blog.cleveland.com/business impact/print.html?entrv=/2014/04/perry nuclear d 
eclares unusual.html 

4. April 3, WQAD 8 Moline - (Illinois) Cordova nuclear plant alert blamed on water 
leak. A pipe that released water onto an electrical system and caused an electrical fault 
at the Quad Cities Generating Station in Cordova prompted an alert to be declared and 
later lifted at the plant after smoke from the fault was reported. 

Source: http://wqad.com/2014/04/02/electrical-fire-reported-at-nuclear-plant-in- 
cordova/ 
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Critical Manufacturing Sector 

5. April 3, Associated Press - (Arizona) Maricopa man facing state criminal charges 
for allegedly manufacturing counterfeit air bags. A Maricopa County man was 
arrested April 1 and charged with allegedly manufacturing counterfeit automotive 
airbags after federal agents and Phoenix police searched his home and found more than 
40 fake airbags. 

Source: 

http://www.dailyiournal.net/view/storv/f71f88a8c84249b386d0371068d9dl53/AZ- 

Fake-Air-Bags-Arrest 

6. April 1, Jackson City Patriot - (Michigan) Bomb threat forced evacuation of nearly 
900 employees at manufacturer west of Jackson. Around 900 employees were 
evacuated from the Michigan Automotive Compressor facility in Parma March 31 for 
around 4 hours after a bomb threat was found in a note at the facility. Police searched 
the facility and did not any find signs of an explosive. 

Source: 

http://www.mlive.com/news/iackson/index.ssf/2014/04/bomb threat forced evacuatio 
n.html 
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Defense Industrial Base Sector 



Nothing to report 
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Financial Services Sector 

7. April 1, Reuters - (International) Two U.S. hackers admit to international cyber 
crime in N.J. court. Two New York men pleaded guilty April 1 in federal court in 
New Jersey to their roles in an international cybercrime and bank fraud ring that hacked 
into several financial services businesses and institutions and attempted to steal around 
$15 million by diverting funds to accounts and payment cards that they controlled. The 
alleged leaders of the ring are Ukrainian citizens and remain at large. 

Source: http://www.reuters.com/article/2014/04/01/usa-crime-cybercrime- 
idUSLlN0MT23Q20140401 

[ Return to top ] 

Transportation Systems Sector 
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8. April 3, WXII 12 Greensboro - (North Carolina) Lanes reopen after tanker truck 



overturns on Interstate 40-85. All four westbound lanes of Interstate 40-85 were 
closed for about 7 hours near mile marker 141 after a semi-truck carrying ethanol 
overturned April 2. 

Source: http://www.wxiil2.com/news/tanker-overtums-on-interstate-4085-lanes- 
closed/25288986 



9. April 2, WCBS 2 New York City - (New York) Plane ends up on grass in emergency 
landing at JFK. Delta flight 886 from Atlanta made an emergency landing at John F. 
Kennedy International Airport and ended up in the grass April 2 after an apparent issue 
with its hydraulic system forced a detour from its scheduled destination of LaGuardia 
Airport. 

Source: http://newvork.cbslocal.com/2014/04/02/plane-ends-up-on-grass-in- 
emergency-landing-at-ifk/ 

For another story, see item 25 
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Food and Agriculture Sector 

10. April 3, Attleboro Sun Chronicle - (Massachusetts) Ammonia leak at Norton 

company leads to evacuation of neighborhood, school. HAZMAT crews responded 
to a Preferred Freezer Services-leased cold storage facility in Norton April 3 after a 
valve malfunctioned and caused an ammonia leak. Workers were evacuated from the 
building and the New Testament Christian School and nearby homes were evacuated 
for over 4 hours as a precaution. 

Source: http://www.thesunchronicle.com/news/local news/ammonia-leak-at-norton- 
company-leads-to-evacuation-of-neighborhood/article 0249653c-bb2c-lle3-bb2b- 
Q01a4bcf887a.html 



11. April 2, U.S. Department of Agriculture - (National) Colorado firm recalls Fettuccini 
Alfredo with Chicken products due to misbranding and undeclared allergens. The 
Food Safety and Inspection Service announced April 2 that American Outdoor Products 
recalled approximately 633 pounds of dehydrated Fettuccini Alfredo with Chicken due 
to misbranding and undeclared milk and wheat. 

Source: http://www.fsis.usda.gov/wps/portal/fsis/topics/recalls-and-public-health- 
alerts/recall-case-archi ve/archive/20 1 4/recall-020-20 1 4-release 
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Water and Wastewater Systems Sector 

12. April 3, WTVR 6 Richmond - (Virginia) 11 people taken to hospital after hazmat 
scare. Eleven people, including seven firefighters, were admitted to a hospital April 3 
after Roanoke River Service Authority Water Treatment Works had a chemical 
accidentally offloaded into the wrong tank. Hazmat crews were called to remove the 
chemicals from the tank and residents near the plant were informed of the mishap. 
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Source: http://wtvr.com/2014/04/02/mecklenburg-county-hazmat/ 



13. April 2, Des Moines Register - (Iowa) Wastewater plant spill sends sludge into 
creek. The Iowa Department of Natural Resources reported that 2,000 gallons of 
sewage sludge spilled into a tributary of Silver Creek April 2 after a valve broke at the 
Cresco Wastewater Treatment Plant. 

Source: http://www.desmoinesregister.com/storv/news/local/2014/04/02/cresco-spill- 

sludge/7205083/ 

14. April 1, Associated Press - (Kentucky) Damaged sewage plant discharging into 
Bullitt County Stream. The operators of the Bullitt County sewage facility worked to 
install a temporary filtration system after a weld broke around a steel pipe, causing a 
wall to collapse and 400,000 gallons of raw sewage to spill per day since March 29. 
Source: http://www.lexl8.com/news/damaged-sewage-plant-discharging-into-bullitt- 
county- stream 

For another story, see item 19 
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Healthcare and Public Health Sector 



15. April 2, WJAR 10 Providence - (Rhode Island) State raises concerns with RI 

Hospital infection control policies. The Rhode Island Department of Health notified 
Rhode Island Hospital in Providence to take immediate action March 21 after it found 
the hospital violated infection control policies when dealing with a potential measles 
patient. The order was publicly released April 2 and hospital representatives stated that 
the emergency department staff is being re-educated on policies and procedures when 
dealing with patients showing symptoms consistent with rare communicable diseases. 
Source: http://www.turntol0.com/storv/25148135/health-department-raises-concerns- 
with-ri-hospital-infection-control-policies 
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Government Facilities Sector 

16. April 3, Associated Press - (Texas) Gunman kills 3, wounds 16 at Fort Hood Army 
base. Three U.S. Army service members were killed and 16 others were injured April 2 
when a war veteran opened fire at the Fort Hood military base in Texas when he 
apparently walked into a building, began firing his semi-automatic pistol, and 
continued firing after driving to and entering another building. The shooter was 
confronted by military police in a parking lot before shooting and killing himself. 
Source: http://news.msn.com/us/gunman-kills-3-wounds-16-at-fort-hood-armv-base 

17. April 3, WISH 8 Indianapolis - (Indiana) Power outage prompts school closure in 
Anderson. A weather-related power outage prompted the closure of 10th Street 
Elementary School in Anderson April 3. 
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Source: http://wishtv.com/2014/04/03/power-outage-prompts-school-closure-in- 
anderson/ 



18. April 3, Associated Press - (California) Burned parts of Yosemite National Park 
reopening. Yosemite National Park officials reported April 2 that areas of the 
California park burned during the 2013 Rim Fire will reopen to the public and advised 
visitors to be cautious and watch out for dangerous trees, uneven ground, or possible 
rock falls and debris. 

Source: http://abcnews.go.com/US/wireStorv/burned-parts-vosemite-national -park- 
reopening-23 1 66033 

19. April 2, Salt Lake City Deseret News - (Utah) Oil spills, leaks plaguing Forest 
Service, BLM in Grand Staircase-Escalante area. A November 2013 leak from a 
valve that impacted a pond at a well site prompted two federal agencies to investigate 
the aftermath of four spills of oil or brine water involving Citation Oil on land in or 
near the Grand-Staircase Escalante National Monument in Utah. The company is 
working with Dixie National Forest to cleanup and burn off the oil at the pond and 
around its edges. 

Source: http://www.deseretnews.com/article/865600085/0il-spills-leaks-plaguing- 
Forest-Service-BLM-in-Grand-Staircase-Escalante-area.html 



For another story, see item 10 
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Emergency Services Sector 

20. April 3, Los Angeles Times - (California) Police capture inmate who escaped L.A. 
Twin Towers jail. Police reported that an inmate who escaped from the Twin Towers 
Correctional Facility in Eos Angeles March 12 was captured in Santa Monica April 2 
without incident. The inmate will face new charges in connection with the escape. 
Source: http://www.latimes.com/local/lanow/la-me-ln-escaped-inmate-captured- 
20140403,0, 13441 51 .story 

21. April 2, KYTV 3 Springfield - (Missouri) Fire destroys two ambulances in Taney 
County. The Taney County Ambulance District’s Station 6 in Merriam Woods 
suffered an estimated $630,000 in damage after an ambulance inside the building 
suffered a shortage and caused a fire. Two ambulances were destroyed along with 
equipment inside the facility. 

Source: http://www.kv3.com/news/local/fire-destroys-two-ambulances-in-tanev- 
county/2 1048998 25291254 

For another story, see item 15 
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Information Technology Sector 



22. April 3, Threatpost - { International) Yahoo encrypts data center links, boosts other 
services. Yahoo announced April 2 that it has begun encrypting all traffic moving 
between its data centers, turned encryption on between its email servers and others who 
support the SMTPLS standard, and turned on encryption on its home page, searches, 
and other properties to enhance user privacy and security. 

Source: http://threatpost.com/vahoo-encrvpts-data-center-links-boosts-other- 
services/105228 



23. April 3, Softpedia - (International) Cybercriminals add new component to Sality to 
hijack the DNS addresses of routers. Researchers at ESET analyzed a new 
component of the Sality malware that was recently added and allows the malware to 
hijack the primary DNS address of routers. The analysis showed that the malware 
targets specific router models and attempts to use a brute force attack to gain 
administrator access, and then changes the router’s DNS server address in order to 
direct users to fake installation sites. 

Source: http://news.softpedia.com/news/Cybercriminals-Add-New-Component-to- 
Sality-to-Hiiack-the-DNS-Addresses-of-Routers-435654.shtml 

24. April 3, Softpedia - (International) ISPs exposed to DNS DDoS attacks due to 
millions of vulnerable home routers. Researchers at Nominum reported finding over 
5.3 million routers have open DNS proxies, which can put Internet service providers at 
risk of DNS amplification distributed denial of service (DDoS) attacks. 

Source: http://news.softpedia.com/news/ISPs-Exposed-to-DNS-DDOS-Attacks-Due-to- 
Millions-of- V ulnerable-Home-Routers-435608 . shtml 



For another story, see item 25 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

25. April 2, IDG News Service - (International) Russia’s Glonass system suffers major 
disruption. Some smartphones and GPS receivers that rely on the Russian Glonass 
satellite positioning system may have experienced problems for around 1 1 hours April 
1 after the system was hit with a major but unknown disruption. 

Source: http://www.networkworld.com/news/2014/04Q214-russia39s-glonass-gps- 
system-suffers-280355.html 
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Commercial Facilities Sector 

26. April 3, Food Safety News - (Oklahoma) Oklahoma families hospitalized with E. coli 
after attending youth expo. The Oklahoma Department of Health is investigating after 
several Oklahoma residents were treated for E.coli infections after attending the 
Oklahoma Youth Expo in March at the State fairgrounds in Oklahoma City. Officials 
advised visitors of the fairgrounds, during and after the expo, to not ignore any flu-like 
symptoms. 

Source: http://www.foodsafetynews.com/2014/04/oklahoma-families-hospitalized- 
with-e-coli-after-attending-youth-expo 

27. April 3, WWJ-TV 62 Detroit - (Michigan) Blaze leaves dozens homeless after 
neighbor grills on wooden apartment balcony. Fire officials believe flames rekindled 
in a charcoal grill after a resident grilled on a wooden balcony, igniting a fire April 3 at 
the Dartmouth Square Apartments building in Inkster that left dozens of residents 
displaced. 

Source: http://detroit.cbslocal.com/2014/04/03/officials-apartment-fire-likelv-caused- 
by-grill-on-balcony/ 

28. April 2, SoMdNews.com - (Maryland) Calvert shopping center reopened, without 
gas after leak. Workers at a construction site near the Calvert Village Shopping Center 
in Prince Frederick struck a 3-inch gas line and caused a leak April 2, prompting an 
evacuation of the center. Authorities cleared the scene and the shopping center 
reopened about 2 hours later without gas service. 

Source: http ://w w w. somdnew s .com/article/20 1 40402/NEWS/ 1 4040967 6/ 1 057/calvert- 
shopping-center-reopened-without-gas-after-leak 
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Dams Sector 

29. April 2, Kent Reporter - (Washington) King County Flood Control District approves 
Green River levee agreement with Kent. The King County Flood Control District 
Board gave its consent March 31to an agreement with the city of Kent to expand the 
work being done on the Green River’s Russell Road Upper levee to increase flood 
protection for the valley. 

Source: http://www.kentreporter.com/news/253635861.html 

30. April 2, Associated Press - (Michigan) Michigan wildlife officials announce 
$350,000 in grants to remove 1 dam, renovate another. The Michigan Department of 
Natural Resources approved $250,000 to the Timberland Resource Conservation & 
Development for the removal of the Hubbardston Dam on Fish Creek, and $100,000 to 
the department’s fisheries division to renovate the Foch Fake Flooding Dam. 
Source: http://www.greenfieldreporter.com/view/story/f085aaele5a64701b219dl6ad20 



-8 - 



5fe57/MI— Dam-Management-Grants 
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Department of Homeland Security (DHS) 

DHS Daily Open Source Infrastructure Report Contact Information 



About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US -CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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